$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa File: fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa (raw, json) Hash identifier: LnKwDv8JWNj5/ZAwKieSuKDGJRN4BFDdUHkEcUr+Cw0= Subject key identifier: 7E:F0:93:0C:87:D6:0A:12:BA:E2:11:9B:68:78:BB:6D:0E:68:C8:9F Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 223C Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa Signing time: Mon 26 Aug 2024 05:33:48 +0000 ROA not before: Mon 26 Aug 2024 05:33:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 61.61.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8764 (0x223c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 26 05:33:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7EF0930C87D60A12BAE2119B6878BB6D0E68C89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:92:8e:e6:d1:6f:d8:24:0c:5b:65:65:09: c8:02:43:f4:98:4d:c3:bf:99:71:c6:45:ab:f4:a8: 88:ce:38:90:ee:7a:83:7d:54:2f:76:07:6a:96:ab: c3:94:77:c1:5c:5c:2f:31:a0:cb:4c:00:1a:35:80: 0d:46:d3:4c:d1:2f:50:b1:c5:57:cf:83:61:a5:13: f2:f5:a2:62:14:53:68:ab:c4:07:1e:56:85:e2:30: 01:d6:07:d6:cb:f3:19:9f:fa:39:26:e5:50:1b:87: 7b:a2:be:07:e8:f9:61:40:da:d6:bd:ed:78:8f:65: 17:b1:21:3d:0d:f7:09:a2:65:c9:36:52:e4:57:16: a9:22:55:1b:be:4e:31:c7:73:2b:7d:22:60:e2:94: 78:47:2d:22:dd:46:ed:f2:9c:4c:f5:59:02:1d:a9: 0c:5d:56:5b:a7:ed:17:72:ad:fa:52:1f:4d:17:0c: fa:b7:2e:a5:83:0a:7c:db:cb:8c:1f:3a:3d:e5:b2: 06:93:a2:50:34:7b:a5:2e:cb:55:72:62:55:4d:de: 27:e5:0c:c4:c7:5d:86:34:3c:f9:5c:9b:01:bd:5b: c8:a2:2d:9b:5c:f5:df:a8:c5:3c:e5:35:7d:fc:61: 6d:18:c1:2d:6c:53:33:8c:b6:e4:29:01:78:44:e4: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:93:0C:87:D6:0A:12:BA:E2:11:9B:68:78:BB:6D:0E:68:C8:9F X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fvCTDIfWChK64hGbaHi7bQ5oyJ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.208.0/21 Signature Algorithm: sha256WithRSAEncryption 96:f7:62:57:31:98:3e:bd:c7:80:97:6e:fc:ab:64:07:64:ff: f2:81:fc:ff:02:78:86:5e:7a:b7:05:3c:37:38:a9:65:37:d4: e6:b6:2f:70:5d:a0:43:37:23:08:c5:5d:87:ea:f1:7a:e0:a0: b5:f3:71:bf:86:f1:78:d6:dc:b6:7b:ff:26:67:51:16:49:6f: a8:05:9e:3b:55:ab:7f:48:69:fc:ca:3c:19:37:78:f9:9d:d1: 56:f7:f2:b1:5e:d5:eb:95:c6:18:60:6b:1c:e3:4b:5c:14:bf: b8:8e:a3:b1:c9:7d:98:15:00:3a:a3:cc:5a:55:4b:b9:13:c5: 08:10:92:e6:f9:ae:a6:29:ac:4b:2b:d0:f5:91:46:b7:6e:16: 0b:92:56:56:76:3c:af:88:8c:67:ca:47:a8:2f:1d:2c:eb:2a: 7e:d7:a2:49:e8:3f:f1:a7:15:6e:7c:77:8f:50:d7:58:31:e9: d1:ed:cb:42:4d:38:26:89:0c:08:fe:5e:c3:d5:cd:b2:44:62: a7:e6:7c:f8:9b:c9:21:29:6a:f9:fb:86:f1:56:60:26:e5:79: 3b:8f:8a:6c:d5:4f:2d:b2:79:03:30:6f:81:d4:69:27:b1:87: d9:1e:ce:19:af:af:2f:27:ec:fb:66:e4:06:b4:4b:4a:6d:10: 82:13:1a:9b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICIjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNDA4MjYw NTMzNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdFRjA5MzBDODdENjBB MTJCQUUyMTE5QjY4NzhCQjZEMEU2OEM4OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKoJKO5tFv2CQMW2VlCcgCQ/SYTcO/mXHGRav0qIjOOJDueoN9 VC92B2qWq8OUd8FcXC8xoMtMABo1gA1G00zRL1CxxVfPg2GlE/L1omIUU2irxAce VoXiMAHWB9bL8xmf+jkm5VAbh3uivgfo+WFA2ta97XiPZRexIT0N9wmiZck2UuRX FqkiVRu+TjHHcyt9ImDilHhHLSLdRu3ynEz1WQIdqQxdVlun7RdyrfpSH00XDPq3 LqWDCnzby4wfOj3lsgaTolA0e6Uuy1VyYlVN3iflDMTHXYY0PPlcmwG9W8iiLZtc 9d+oxTzlNX38YW0YwS1sUzOMtuQpAXhE5L0vAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfvCTDIfWChK64hGbaHi7bQ5oyJ8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2Z2Q1RESWZXQ2hLNjRoR2Jh SGk3YlE1b3lKOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 PdAwDQYJKoZIhvcNAQELBQADggEBAJb3YlcxmD69x4CXbvyrZAdk//KB/P8CeIZe ercFPDc4qWU31Oa2L3BdoEM3IwjFXYfq8XrgoLXzcb+G8XjW3LZ7/yZnURZJb6gF njtVq39IafzKPBk3ePmd0Vb38rFe1euVxhhgaxzjS1wUv7iOo7HJfZgVADqjzFpV S7kTxQgQkub5rqYprEsr0PWRRrduFguSVlZ2PK+IjGfKR6gvHSzrKn7XoknoP/Gn FW58d49Q11gx6dHty0JNOCaJDAj+XsPVzbJEYqfmfPibySEpavn7hvFWYCbleTuP imzVTy2yeQMwb4HUaSexh9kezhmvry8n7Ptm5Aa0S0ptEIITGps= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:58 2024 by rpki-client on console-ams.rpki-client.org